Senior DevSecOps Engineer

We are seeking a Senior DevSecOps Engineer with strong hands-on experience designing, implementing, securing, and operating cloud-native infrastructure. The ideal candidate will have expertise in AWS, Terraform, Kubernetes, Helm, Docker, CI/CD, and GitOps, along with strong knowledge of cloud security, identity, networking, and microservice architectures.

Mission Focus: Our machine learning teams bridge the gap between cutting-edge AI research and operational government missions. We are looking for engineers who can take machine learning and Computer Vision (CV) solutions from early research and prototyping all the way into stable, scalable production environments.

Clearance: We are seeking candidates with an active TS/SCI clearance or higher; however, we will consider highly qualified candidates with an active Secret clearance who are willing and able to obtain a TS/SCI.

Location/Flexibility: Vienna, VA / Chantilly, VA (Hybrid / Flexible Remote options available)

Key Responsibilities

• Design, implement, and maintain AWS infrastructure using Terraform and Infrastructure as Code.
• Build, deploy, and operate containerized applications using Kubernetes/EKS, ECS, Docker, and Helm.
• Develop and maintain CI/CD pipelines and implement Git-based GitOps workflows using Argo CD.
• Implement secure authentication and authorization using SSO, IAM, RBAC, and workload identities.
• Apply Zero Trust, least privilege, defense-in-depth, and secure-by-design principles.
• Integrate security controls into CI/CD and cloud environments, including vulnerability and container security scanning.
• Design and troubleshoot AWS networking, including VPCs, subnets, routing, security groups, load balancers, DNS, and TLS.
• Support deployment and operation of microservice-based applications.
• Troubleshoot complex cloud, Kubernetes, networking, CI/CD, and application deployment issues.
• Establish and promote DevSecOps, infrastructure, security, and operational best practices.

Required Qualifications

• 7+ years of experience in DevOps, DevSecOps, Cloud, or Platform Engineering.
• Strong hands-on Terraform and AWS experience.
• Strong hands-on experience with Kubernetes and Amazon EKS.
• Experience with ECS, Docker, and Helm.
• Experience building and maintaining CI/CD pipelines.
• Strong knowledge of Git and Argo CD/GitOps.
• Hands-on experience with SSO, IAM, Kubernetes RBAC, and access control.
• Strong understanding of Zero Trust and cloud security principles.
• Strong AWS networking knowledge.
• Familiarity with microservice and cloud-native architectures.
• Experience applying security standards and best practices throughout the software development and deployment lifecycle.
• Strong troubleshooting, automation, and problem-solving skills.

Preferred Qualifications

• Experience with AWS GovCloud or regulated environments.
• Knowledge of NIST, CIS, FedRAMP, FISMA, or DoD security requirements.
• Experience with Kubernetes security, NetworkPolicies, Secrets Management, and workload identity.
• Experience with monitoring, logging, and observability technologies.
• AWS, Kubernetes, Terraform, or security certifications.